Extracted

• • Target
    2026-11-03_832a833a4e89564c7921f0c179291070_elex_rhadamanthys_smoke-loader_wapomi
  • Size 64KB
  • SHA256 2fb4f81e722c0c2520f72d11b38badad7df64d628b6adb14eab4098193d3d500
  • MD5 832a833a4e89564c7921f0c179291070
  • SHA1 7fcccbc1243facd1863c597ac25205f0a35cf28c
  • SHA512 b2d1646df2914059822f454e93baf0bac7d48affdfaf5ce7acb0c6e8745bf9b858608e5915ba5cef3ce1e6104fe5db092f9f9c80174738e7a8f54d54031b53dc
  • SSDEEP 1536:sHyspi8zm711aUxVykKgQQtNdGCq2iW7z:sHyspn3UztfGCH
  • TLSH
    T12553C1336EC1C07BC48B41F101694B5AAB7B653083F952D78B980966BE93794BE3931F
  • MD5 SHA1 SHA512 SSDEEP TLSH

  Score

  10^/10

  aspackv2backdoordiscoveryexecutionbdaejec

  • Detects Bdaejec Backdoor.

    Bdaejec is backdoor written in C++.

  • Family: Bdaejec

    Bdaejec is a backdoor written in C++.

    backdoorbdaejec
  • Custom signature

    Detects executables packed with ASPack

  • ASPack v2.12-2.42

    Detects executables packed with ASPack v2.12-2.42

    aspackv2

  • Checks computer location settings

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE

  behavioral1behavioral2